Homepage
About Snyk

aws-cdk@2.145.0 vulnerabilities

CDK Toolkit, the command line tool for CDK apps

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the aws-cdk package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Incorrect Authorization

aws-cdk is a CDK Toolkit, the command line tool for CDK apps

Affected versions of this package are vulnerable to Incorrect Authorization due to the RestApi construct using CognitoUserPoolAuthorizer as the authorizer. An attacker can gain unintended access to protected API resources or methods by exploiting incorrect authorization scope settings.

Note: This issue does not affect the availability of the specific API resources.

How to fix Incorrect Authorization?

Upgrade aws-cdk to version 2.148.1 or higher.

>=2.142.0 <2.148.1
Go back to all versions of this package